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(54) Upgrading networked device software 

(57) A method of upgrading software and a networic 
device for perfonning the same are provided so that the 
operation of a network device is not catastrophically af- 
fected by a failure occumng while software is being up- 
graded in a network environment. The method includes 
upgrading software through the network and checking 
whether at least one failure occurs during the upgrade, 
operating the network device based on an old version 
of the software used before the upgrade Is perfomied 
when It is detemiined that at least one failure has oc- 
curred, and operating the network device based on a 
new version of the software to which the old version is 
upgraded when it is detennined that a failure has not 
occurred. Accordingly, even if the upgrade of the soft- 
ware is not performed nomially, the network device can 
attempt the upgrade of the software without being serv- 
iced or without using an extemai memory device. 



fig; 2 




oovmijOAO sormwc MO QCCK nm 

NCraORK aSCDNNCCIKm MID 

IN SOmME OUtMC — ^ 




UPCAAOE SOFnORE TO NEW VERSION AM) 
CHECK VfHCTfCR POWER rAUURC iOt StSIEll 
H«(C-UP OCCURS 0URM6 .UTOU0C 




RC5»Rr.}CTW0RX OCMCC BASED 

OH Ncv «R9(M or sonwvK 



CO 

N 
CM 



0. 

LU 



Printed by Jouve, 76001 PARIS (FR) 



1 



EP1271 311 A2 



2 



Description 

[0001] The present invention relates to a method of 
operating a networked device for upgrading the soft- 
ware of the networked device, the method comprising 
attempting to receive upgrade software from a remote 
station via a network, store the received software in a 
memory and restart the device, and a devtee capable of 
being so operated. 

[0002] As network environments develop, the need of 
network service providers, network operators, and net- 
worked device users to upgrade software for networked 
devices increases. Networked devices include mobile 
and portable telephones and personal computers that 
can transmit and receive data through a network. 
[0003] However, when an unexpected failure occurs 
In a networked devbe or a network during a software 
upgrade of the networked device, the upgrade is not 
completed nomnally. Moreover, there may be cata- 
strophic consequences for the networked device ren- 
dering It Inoperable. 

[0004] in other words, when a failure occurs in a net- 
work while a new version of software Is being download- 
ed through the network to upgrade the software of a net- 
worked device, the new version of the software cannot 
be downloaded nomially Here, the problem can be 
overcome by trying to download the new version again. 
[0005] However, when an unexpected failure occurs 
in a networked devk:e while the new version of software 
Is being stored in a storage area in the networked de- 
vice, from which the old version of the software has been 
erased, to upgrade the software, the networked device 
cannot store the new version of the software nomnally 
As a result, the networked device cannot perform func- 
tions that use the software. 

[0006] In the case where software to be upgraded 
does not greatly Influence the operability of a networked 
device, even when an unexpected failure occurs In the 
networked device as described above, a problem can 
be prevented by connecting an Interface block provided 
in the networked devk:e to an external memory device 
and downloading the software. However, In this case, it 
is annoying that the external memory device must be 
managed to store the new version of the software or to 
store the version of the software which is currently 
stored in the networked device. 
[0007] In the case where software to be upgraded is 
fundamental to the operability of a networked device, for 
example its operating system (OS), when an unexpect- 
ed failure occurs in the networked device as described 
above, the networiced device is catastrophically affected 
and becomes inoperable. Here, the problem cannot be 
solved by using an external memory device only, as de- 
scribed above. A corresponding chip or the networked 
device must be replaced. 

[0008] A method according to the present invention is 
characterised by retaining an instance of the original 
software being upgraded and determining whether the 



upgrade software has been Installed successfully, and, 
on restarting the device, selectively using the original 
software or the upgrade software in dependence on the 
detemnination of whether the upgrade software has 

5 been successfully installed. 

[0009] A networked device, according to the present 
Invention, includes control means, memory and up- 
grade failure detection means, and the control means 
and the upgrade failure means are configured for oper- 

10 atlon of the device according to present invention. 
[0010] in an embodiment, the method includes the 
steps of upgrading software through the networic and 
checking whether at least one failure occurs during the 
upgrade, operating the networked device based on an 

IS old version of the software used before the upgrade Is 
pertonned when it Is detennined that at least one failure 
has occurred, and operating the networked device 
based on a new version of the software to which the old 
version is upgraded when It Is detennined that a failure 

20 has not occurred. 

[0011] Preferably, the upgrading of software Includes 
the steps of downloading the new version of the soft- 
ware through the network, copying the old version of the 
software stored in a first area of the networked devtee 

25 to a second area of the networked device, erasing the 
old version of the software from the first area of the net- 
worked device, and storing the new version of the soft- 
ware in the first area. 

[0012] Preferably, the failure is a failure in the net- 
30 worked device which is checked during the erasing and 

storing steps. 

[0013] In an embodiment of a networked device ca- 
pable of upgrading software through a networt<, the net- 
worked device Includes a monitoring unit for monitoring 
35 at least one failure while software is being upgraded; a 
first memory for storing software necessary for operat- 
ing the networked device; a second memory for storing 
Information transferred through the networi<; a controller 
for perfomriing control to store Infomiation, which is 
^0 downloaded through the network to upgrade the soft- 
ware, in the second memory, and store an old version 
of the software in an empty area of the first memory be- 
fore the old version of the software stored in the first 
memory Is upgraded with the information stored In the 
45 second memory; and a decoder for selecting a memory, 
which Is used for upgrading the software, between the 
first memory and the second memory according to a 
control signal received from the controller and the result 
of monitoring received from the monitoring unit, and set- 
so ting an address. 

[0014] in another embodiment, there Is provided a 
networked device capable of upgrading software 
through a networi<. The networked device includes a 
monitoring unit for monitoring whether at least one fall- 
55 ure occurs while software is being upgraded; a first 
memory for stori ng software necessary for operating the 
networked device; a second memory for storing data 
necessary for operating the networked device; a third 
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memory for storing Infomiatlon transferred through the 
network; a controller for performing control to store In- 
formation, which is downloaded through the network to 
upgrade the software, in the third memory, and store an 
old version of the software in an empty area of the sec- 
ond memory before the old version of the software 
stored in the first memory Is upgraded to the Infomiatlon 
stored in the third memory; and a decoder for selecting 
a memory, which is used for upgrading the software, ac- 
cording to a control signal received from the controller 
and the result of monitoring received from the monitor- 
ing unit, and setting an address. 
[001 5] Embodiments of the present invention will now 
be described, by way of example, with reference to the 
accompanying drawings, in which:- 

Figure 1 is a block diagram of a networked device 
according to the present invention; and 
Figure 2 is a flowchart of a method of upgrading 
software according to the present invention. 

[0016] Referring to Figure 1 , a networked device ac- 
cording to the present invention includes a monitoring 
unit 100, a network Interface unit 104, a chip selection/ 
address decoder 1 05, a controller 1 06, a conditional ac- 
cess system (CAS) 1 07, a flash memory 1 08 for storing 
code data, a non-volatile memory 109 for storing data, 
and a system memory 110 for storing execution data. 
[0017] The monitoring unit 1 00 monitors at least one 
failure mode while the software of the networked device 
is being upgraded. The monitoring unit 100 includes a 
watchdog monitor 1 01 , a power failure monitor 1 02, and 
a network connection monitor 103. 
[0018] The watchdog monitor 101 monitors the gen- 
eration of a clock signal through which the operation of 
the networked device can be monitored to determine 
whether the networi<ed device is operating nomnally, 
and sends the monitoring results to the chip selection/ 
address decoder 105. 

[001 9] The power failure monitor 1 02 monitors wheth- 
er a power voltage supplied from a power supply (not 
shown) within the networiced device drops below a pre- 
detemnined level, and sends the monitoring result to the 
chip selection/address decoder 105. 
[0020] The network connection monitor 1 03 monitors 
the state of data transmitted and received through the 
networic Interface unit 1 04, and sends the monitoring re- 
sults to the chip selection/address decoder 105. 
[0021 ] The network interface unit 1 04 perfonns Inter- 
facing to allow data communications between a party, ' 
which Is providing the new version of the software being 
upgraded through a network (not shown), and the net- 
worked device shown In Figure 1 . More partbulariy. the 
network interface unit 1 04 can be realized by decoding 
the received software and checking the received data 
for errors. Data error checking can be performed by way 
of a checksum. 

[0022] The CAS 107 transmits data to and receives 



data from the party providing software through the net- 
work and perfomns authentication of the networked de- 
vice for a software upgrade. In other words, the CAS 

1 07 verifies whether the networked device has authority 
5 to upgrade con^esponding software. Here, upgrading of 

software can be performed according to the detemriina- 
tion of a software provider or at the request of a net- 
worked devtee user. 

[0023] The flash memory 108 for code data stores 
10 software such as an operating system (OS) necessary 
for operating the networi<ed device. When software 
stored in the flash memory 108 is upgraded, if the flash 
memory 108 has an empty area, the old version of the 
software can be stored in the empty area through the 
15 operation of the chip selection/address decoder 1 05. 
[0024] The non-volatile memory 109 for data stores 
data necessary for operating the networiced device. In 
particular, when software stored in the flash memory 

1 08 is upgraded, the old version of the software that has 
20 been stored In the flash memory 108 can be stored in 

an empty area existing in the non-volatile memory 109 
through the operation of the chip selection/address de- 
coder 105. 

[0025] The system memory 110 stores infomiatlon 
25 transmitted through the networic when the networiced 
device is driven. 

[0026] The controller 1 06 controls the networked de- 
vice to be able to upgrade software. In other words, once 
the new version of software to be upgraded is download- 

30 ed through the network Interface unit 1 04 and the CAS 
1 07, the controller 1 06 sends a control signal to the chip 
selection/address decoder 1 05 so that the new version 
of the software can be stored in the system memory 110. 
Accordingly, the chip selection/address decoder 105 

35 sets a chip selection signal for the system memory 110 
and an address to indk:ate an area of the system mem- 
ory 11 0 In which the software is to be stored so that the 
received new version of the software can be stored In a 
desired area of the system memory 11 0. 

40 [0027] Next, the controller 1 06 sends a control signal 
to the chip selection/address decoder 105 so that the 
old version of the software stored in the flash memory 
1 08 can be stored in an empty area of the flash memory 
1 08 or in an empty area of the non-volatile memory 1 09. 

45 Accordingly, when the old version of the software is 
stored In the empty area of the flash memory 108, the 
chip selection/address decoder 105 sets a chip selec- 
tion signal and an address so that a path for storing is 
be set. In other words, the chip selection/address de- 

50 coder 1 05 does not change the chip selection signal but 
changes the address. When the old version of the soft- 
ware is stored in the empty area of the non-volatile mem- 
ory 1 09, the chip selection/address decoder 1 05 sets a 
chip selection signal and an address so that a path for 

55 storing is set. In other words, the chip selection/address 
decoder 1 05 changes both the chip selection signal and 
the address. Here, when the start address of the empty 
area of the non-volatile memory 1 09 is the same as the 
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start address of an area where the old version of the 
software is stored In the flash memory 1 08, the chip se- 
lection/address decoder 105 changes only the chip se- 
lection signal. Therefore, the old version of the software 
stored in the flash memory 1 08 is copied to another ar- 
ea. 

[0028] The controller 1 06 also sends a control signal 
to the chip selection/address decoder 105 so that the 
new version of the software stored in the system mem- 
ory 110 can be stored in an area where the old version 
of the software is stored in the flash memory 1 08, there- 
by upgrading the software. The area where the old ver- 
sion of the software is stored Is an area where the orig- 
inal old version of the software is stored in the flash 
memory 108 before the copying is perfomied. 
[0029] The chip selection/address decoder 1 05 sets 
a chip selection signal and an address in response to a 
control signal sent by the controller 1 06 so that the new 
version of software stored In the system memory 110 
can be stored in the flash memory 108. 
[0030] While software is being upgraded, the chip se- 
lection/address decoder 105 continuously monitors the 
result of monitoring provided from the monitoring unit 
100. When a signal Indicating a failure Is received from 
the network connection monitor 1 03 while the new ver- 
sion of the software is being downloaded to the system 
memory 110, the chip selection/address decoder 105 is 
initialized. When a signal indicating a failure is received 
from the watchdog monitor 101 or the power failure 
monitor 102 while Information stored in the system 
memory 110 is being stored In the flash memory, the 
chip selection/address decoder 1 05 sets a chip selec- 
tion signal and an address to select a memory neces- 
sary for restarting the networked device based on the 
old version of the software. 

[0031] Referring to Figure 2, in an initial state In step 
201 , when the network connection between a software 
provider and a networked device as shown in Figure 1 
is set in step 202, the version of software to be provided 
by the software provider is compared with the version 
of the software already in the networked device In step 
203. If the version of the software in the networked de- 
vice is not old, upgrading of the software Is not neces- 
sary and the operation goes back to step 201 so that the 
networked device is maintained at the initial state. 
[0032] If the version of the software provided in the 
networked device is old, upgrading of the software Is 
started in step 204. User authentication is perfonmed In 
step 205. In other words, authentication Is performed 
through data transmission between the software provid- 
er and the networked device for user authentication, as 
described with respect to the CAS 1 07 of Figure 1 . The 
authentication is accomplished by a typical well-known 
method. 

[0033] If the user authentication ends in failure in step 
205, the networked device does not have authority to 
upgrade the software. The operation goes back to step 
201 . In contrast, if the user authentication ends success- 



fully in step 205, the software is downloaded to the sys- 
tem memory 110 and a check is made as to whether a 
network disconnection has occurred and whether an er- 
ror has occurred in the data of the received software in 

5 step 206. Data error checking for the received software 
can be perfomied by way of a checksum. 
[0034] When It Is determined that a network discon- 
nection or data enror occunred In step 207, the operation 
goes back to step 201 . and upgrading of software is not 

10 perfomied. 

[0035] In contrast, when it is determined that neither 
a network disconnection nor a data error occun-ed In 
step 207, a check is made as to whether downloading 
is complete in step 208. If it is detemiined that down- 

15 loading is not complete in step 208, steps 206 and 207 
are repeated. 

[0036] If it is determined that the downloading is com- 
plete In step 208, the old version of the software is cop- 
ied to another area In step 209. Another area may be 
20 an empty area of the flash memory 1 08 or an empty area 
of the non-volatile memory 109, as described in Figure 
1. 

[0037] In step 21 0, the software is upgraded to a new 
version, and it is checked whether a failure such as a 

25 power failure or system hang-up occurs in the net- 
worked device during the upgrading. Here, for a soft- 
ware upgrade, a path to an area in which the old version 
of the software Is stored is changed to a path to the area 
to which the old version has been copied. In other words, 

30 when the old version has been copied to an empty area 
of the flash memory 1 08, the chip selection/address de- 
coder 105 sets a chip selection signal and an address 
to designate the empty area of the flash memory 108. 
Next, the original old version of the software is erased 

35 from the flash memory 106, and then the new version 
of the software stored in the system memory 1 1 0 is writ- 
ten to the area from which the original old version was 
erased in the flash memory 106. 
[0038] While the monitoring unit 100 is checking 

40 whether a failure such as a power failure or system 
hang-up has occured in the networked device during the 
upgrading, when it is detemnined that at least one failure 
has occurred in the networked device in step 211, the 
networked device is restarted based on the old version 

45 of the software in step 21 2. Then, the operation returns 
to step 201. In contrast, when It is detemnined that no 
failures have occurred in the networked device in step 
211, a check is made as to whether the software up- 
grade has been completed in step 213. 

50 [0039] When it is detemnined that the software up- 
grade has not been completed in step 213, steps 210 
and 211 are repeated. In contrast, when it is determined 
that the software upgrade has been completed in step 
213, the networked device is restarted using the new 

55 version of the software in step 214, Then, the operation 
returns to step 201 . 

[0040] According to the present invention, while soft- 
ware is being upgraded to a new version through a net- 
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work, if a sudden failure such as hang-up or iatch-up of 
a networked device or a failure In power occurs before 
the software upgrade Is completed normally, the net- 
worked device is restarted based on the software of an 
old version so that the networked device can attempt 
the upgrade of the software again without being serv- 
iced or without using an external memory device. 



Claims 

1 . A method of operating a networked device for up- 
grading the software of the networked device, the 
method comprising attempting to receive upgrade 
software from a remote station via a network, store 
the received software In a memory (1 1 0) and restart 
the device, characterised by retaining an instance 
of the original software being upgraded and deter- 
mining whether the upgrade software has been In- 
stalled successfully, and, on restarting the device, 
selectively using the original software or the up- 
grade software in dependence on the determination 
of whether the upgrade software has been success- 
fully installed. 

2. A networked device including control means (1 06), 
memory (108, 109, 110) and upgrade failure detec- 
tion means (100), wherein the control means (106) 
and the upgrade failure means (1 00) are configured 
for operation of the devk:e according to claim 1 . 

3. A network device capable of upgrading software 
through a network, comprising: 

monitoring means for monitoring at least one 
failure while software is being upgraded; 
a first memory for storing software necessary 
for operating the network device; 
a second memory for storing infonnation trans- 
fenced through the network; 
a controller for performing control to store infor- 
mation, which Is downloaded through the net- 
work to upgrade the software, In the second 
memory, and store an old version of the soft- 
ware in an empty area of the first memory be- 
fore the old version of the software stored in the 
first memory Is upgraded with the infonnation 
stored in the second memory; and 
a decoder for selecting a memory, which is 
used for upgrading the software, between the 
first memory and the second memory accord- 
ing to a control signal received from the control- 
ler and the result of monitoring received from 
the monitoring means, and setting an address. 

4. The networi< device of claim 3, wherein the control- 
ler provides a control signal to the decoder to: copy 
the old version of the predetemnlned software to the 



empty area of the first memory, erase the old ver- 
sion of the software stored in an original area of the 
first memory, and copy the Information stored In the 
second memory to the original area of the first mem- 
5 ory. 

5. The networtc device of claim 3, wherein the moni- 
toring means monitors whether a failure in a net- 
work device such as a power failure or hang-up of 

10 the network device occurs. 

6. The network device of claim 3, wherein the moni- 
toring means monitors whether a failure In the net- 
work occurs. 

IS 

7. The network device of claim 3, wherein when the 
decoder receives a signal indicating that at least 
one failure has occurred from the monitoring means 
while the software is being upgraded, the decoder 

20 returns to the initial state of the network device. 

8. The networic device of claim 7, wherein when the 
failure occurs while the old version of the software 
Is being upgraded after the old version of the soft- 

25 ware is copied to the empty area of the first memory, 
the decoder operates so that the network device 
can be restarted based on the old version of the 
software. 

30 9. A networic device capable of upgrading software 
through a networic, comprising: 

monitoring means for monitoring whether at 
least one failure occurs while software is being 

35 upgraded; 

a first memory for storing software necessary 
for operating the networic device; 
a second memory for storing data necessary for 
operating the networic device; 

40 a third memory for storing infonnation trans- 

ferred through the network; 
a controilerfor perfonning control to store Infor- 
mation, which is downloaded through the net- 
wort< to upgrade the sofhware, In the third mem- 

45 ory, and store an old version of the software in 

an empty area of the second memory before 
the old version of the software stored in the first 
memory Is upgraded to the information stored 
in the third memory; and 

50 a decoder for selecting a memory, which is 

used for upgrading the software, according to 
a control signal received from the controller and 
the result of monitoring received from the mon- 
itoring means, and setting an address. 

55 

10. A method for upgrading software of a networi< de- 
vice through a network, the method comprising the 
steps of: 
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upgrading software through the network and 
checking whether at least one failure occurs 
during the upgrade; 

operating the network device based on an old 
version of the software used before the up- 
grade Is performed when it is determined that 
at least one failure has occurred; and 
operating the network device based on a new 
version of the software to which the old version 
is upgraded when It is detemiined that a failure 
has not occurred. 

11. The method of claim 10, wherein the upgrading of 
software comprises the steps of: 

downloading the new version of the software 
through the network; 

copying the old version of the software stored 
in a first area of the network device to a second 
area of the network device; 
erasing the oid version of the software from the 
first area of the network device; and 
storing the new version of the software In the 
first area. 

12. Themethodof claim 11, wherein the failure is a fail- 
ure in the network device which is checked during 
the erasing and storing steps. 

13. The method of claim 10, wherein the failure com- so 
prises a power f ailu re in the network device or hang- 
up of the networ1< device. 

14. The method of claim 10 or 13, wherein the failure 
comprises a network failure. 3s 
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